The Zeus Sphinx malware was first observed on August 2015, a few days after a new variant of the popular Zeus banking trojan was offered for sale on hacker forums. It was observed in a new wave of attacks attempting to exploit the interest in the Coronavirus outbreak. The malware is now being used in a spam campaign aimed at stealing victims financial information. Spam emails include a form, in an MS Word format, that must be filled out to receive funds to help people that now are at home due to the COVID 19 pandemic.”]
Source: https://securityaffairs.co/wordpress/100756/cyber-crime/coronavirus-zeus-sphinx-spam.html